PDA

View Full Version : Kapersky A-V says soonerfans is infected w/ a Trojan



RoaminSooner
1/1/2010, 07:54 PM
Soonerfans won't open on my pc. A warning page blocks entry and says:
requested object is infected with the following virus:
Trojan-Clicker.JS.Iframe.dd

thanks! Happy new year and Boomer Sooner!

soonerboomer93
1/9/2010, 09:19 PM
Getting the same thing. Started yesterday

Gandalf_The_Grey
1/9/2010, 10:05 PM
Your Passwords are OURS!!

soonerboomer93
1/11/2010, 02:13 PM
I think it's because of the redirecter that comes up indicating a Message that they want us to read.

soonerloyal
1/18/2010, 02:59 PM
I got the same thing, so now I use my Bookmarked link to access the place. That seems to work fine.

Scott D
1/22/2010, 04:37 PM
I think it's because of the redirecter that comes up indicating a Message that they want us to read.

I was getting it before the redirecter that was put up. Now, I just get a fancy little tune every so often.

OU-HSV
1/25/2010, 08:33 PM
Had this problem yesterday on my home computer when I was trying to reply to a thread. Then today when I was on my office computer, as soon as I brought our board up...my office symantec virus protection picked up a trojan virus on here. I'm sending Phil a PM to be sure he knows.

soonerboomer93
1/27/2010, 03:31 PM
I've been getting it again. It's still letting me access the site, but blocking the item. Seems like it's a heuristic one, which means it's bloocking based on a possible infection and not a real one. It might mean they just need to patch vBulletin, not sure though.

virus HEUR:Trojan.Script.Iframer http://www.soonerfans.com/forums/clientscript/vbulletin_global.js?v=362

Boomer.....
1/27/2010, 04:04 PM
Same message here.

SoonerLB
1/28/2010, 01:10 PM
I've had the following a couple times in the past few days, most recently prior to adding this reply. I run Avast antivirus, and this is what I get:

File name: http://www.babied.in/pdl.php

Malware name: JS:Pdfka-TZ(Expl)

Malware type: Exploit

VPS version: 100128-0 01/28/2010

AdaSoonerFan
1/29/2010, 06:57 PM
Google is reporting Soonerfans as a susepcted attack site. http://www.google.com/search?hl=en&source=hp&q=soonerfans.com&btnG=Google+Search

OU-HSV
1/29/2010, 07:21 PM
Let me try to post a copy of the warning image I'm getting:

http://img62.imageshack.us/img62/6910/warninge.jpg (http://img62.imageshack.us/i/warninge.jpg/)

Crucifax Autumn
1/30/2010, 05:43 AM
Hello????? Can we get some service in this here restaurant or what? :P

Phil
1/30/2010, 11:35 AM
Working on it. It appears from vbulletin that Avast and Kaspersky were showing some regular site scripts as malware, but that's supposedly been fixed on their end. Other sites had the same problem. However, there appears to be something else going on.

soonerloyal
1/30/2010, 07:06 PM
I wasn't able to get on at all yesterday.

I miss-ted youse guys. *sniffle*

Ray Hefner
2/19/2010, 09:51 PM
I had a virus a couple of weeks ago. Cost $200 to grt it fixed. had AVG free but it was not updated.
Ray

rockhead
2/20/2010, 09:18 PM
I'm getting something every time I click a new soonerfans link from my avast. http://members.cox.net/jeffyg/trojan.PNG

Phil
2/22/2010, 11:46 AM
I have updated the server files, so whatever problem there was should be gone now. Please let me know the specifics if you get any kind of warning again. Thanks.

soonerloyal
3/9/2010, 09:04 AM
Just typed in soonerfans.com and it took me to a page that said "Error" and "Forbidden" "ispCP OMEGA Error 403". I triple-checked, and yes, it was http://soonerfans.com . Ack.

sooner_born_1960
3/9/2010, 03:08 PM
If you add "/forums" to teh end of it, it works fine.

Phil
3/10/2010, 04:06 PM
Just typed in soonerfans.com and it took me to a page that said "Error" and "Forbidden" "ispCP OMEGA Error 403". I triple-checked, and yes, it was http://soonerfans.com . Ack.

I fixed that. Had to do with the index file and the new server. Took me literally about 10 seconds to fix once I realized what the problem was.